Categories: Malware

Downloader.DStudio removal guide

The Downloader.DStudio is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Downloader.DStudio virus can do?

Presents an Authenticode digital signature
Creates RWX memory
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Downloader.DStudio?


File Info:
name: 0891C66B85A272ADB32E.mlwpath: /opt/CAPEv2/storage/binaries/67d408c61993e2f4f0a3ddc386d8e738f57a7672b47b60edc4ea86973408cc32crc32: 98460699md5: 0891c66b85a272adb32e0e56baac0cdasha1: 94e2ce18a2342458861923bc3c95a46a897e1cb8sha256: 67d408c61993e2f4f0a3ddc386d8e738f57a7672b47b60edc4ea86973408cc32sha512: 7f8c27a173df2b5438230b54622469253a8813345dc46514fa3819cd09e0fe59b7e716a5403315f03b2ccdc726ef7cb0402a6df3bee3c0701b798038e8306662ssdeep: 98304:iN+6DG2leNlau3jJdm2N5JnxVPI4YDJq:ivG2lepLNnxIDtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1EAF578012E7D8426F462463D096CA577C57BBFDCBB2F46A722B0663B2B337805529732sha3_384: 020a8fad13df0a1565913f73695339cb163895a8200af25875b86b1b951b59194675950276e25fc05c2c3152a59337dcep_bytes: 81ecd40200005356576a205f33db6801timestamp: 2021-07-24 22:22:34
Version Info:
CompanyName: Download Studio ProjectFileDescription: Download Studio SetupFileVersion: 1.17.0.0LegalCopyright: 2021 (c) Download Studio ProjectProductName: Download StudioProductVersion: 1.17.0.0Translation: 0x04b0 0x04b0

Downloader.DStudio also known as:

Bkav	W32.AIDetect.malware1
DrWeb	Adware.Downware.19985
MicroWorld-eScan	Adware.GenericKD.47395230
ALYac	Adware.GenericKD.47395230
Malwarebytes	PUP.Optional.DStudio
K7GW	Adware ( 00588e371 )
K7AntiVirus	Adware ( 00588e371 )
ESET-NOD32	Win32/Downloader.DownloadStudio.A potentially unwanted
APEX	Malicious
ClamAV	Win.Trojan.Generic-9907441-0
BitDefender	Adware.GenericKD.47395230
Ad-Aware	Adware.GenericKD.47395230
Emsisoft	Application.Downloader (A)
McAfee-GW-Edition	DStudio-IFA
FireEye	Adware.GenericKD.47395230
GData	Adware.GenericKD.47395230
MAX	malware (ai score=65)
Antiy-AVL	Trojan/Generic.ASMalwS.312E8D1
Arcabit	Adware.Generic.D2D3319E
Cynet	Malicious (score: 100)
AhnLab-V3	PUP/Win.Generic.R447032
McAfee	DStudio-IFA
VBA32	Downloader.DStudio
Tencent	Trojan.Win32.BitCoinMiner.la
Fortinet	Adware/DStudio